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5) n Claim(s) is/are allowed. 

Q)M Claim(s) li£ is/are rejected. 
/)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 
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DETAILED ACTION 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not Identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-2, 4-6 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bianco (6,256,737 B1) in view of Eberhard (5,473,689), further in view of Tatebayashi et 
al (6,049,611). 

Claim 1 : Bianco teaches a computer with an interface to authenticate over a 
network system (col. 12, lines 12-22), biometric identification mechanisms or devices 
utilize a scientific technique to identify a user based on compared measurements of 
unique personal characteristics (col. 7, lines 54-57), live biometric data is matched with 
stored biometric data (col. 8, lines 16-17), and with a successful match, the user ID is 
determined (col. 26, lines 34-37). Bianco does not explicitly teach sending a random 
number from a remote site to a local site of a user, the use of a math table to create a 
cryptogram, and sending the first cryptogram from the local site to the remote site for 
comparison with an internally generated cryptogram. Eberhard, in an analogous art, 
teaches generating a random number and transmitting the number to station (col. 1, 
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lines 44-47) and transmitting the part of a first cryptogram from one station to another, 
then comparing the cryptogram part in the second station (col, 1, lines 50-55). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco by including the 
sending of random number and transmitting the cryptogram, then comparing it to 
another cryptogram. This modification would have been obvious because a person 
having ordinary skill in the art would have been motivated to do so, as suggested by 
Eberhard, in order to allow other users at additional sites to receive cryptograms and 
random numbers for authentication. 

The combination of Bianco in view of Eberhard does not explicitly teach sending 
the first cryptogram from the local site to the remote site for comparison with an 
internally generated cryptogram. However, Tatebayashi, in an analogous art, teaches 
the authentication data is a cryptogram, which was produced by encrypting a random 
number (col. 2, lines 43-47). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco as combined with 
Eberhard by including the step of producing a cryptogram generated by a random 
number. This modification would have been obvious because a person having ordinary 
skill in the art would have been motivated to do so, as suggested by Tatebayashi, in 
order to allow uniquely and secure cryptograms to be produced. ^ 

The combination of Bianco, Eberhard, and Tatebayashi does not explicitly teach 
a math table in performing an encryption. It is commonly known to one reasonably 
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skilled in the art that the encryptions nnay be nnade by the use of a math table. 
Therefore, the examiner takes official notice that a person reasonably skilled in the art . 
would make use of this technique to perform the encryption. 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system as combined above by 
including the use of a math table in the encryption. This modification would have been 
obvious because a person having ordinary skill in the art would have been motivated to 
do so, as suggested by that which is commonly known in the art, in order to allow 
specific encryptions to occur and reducing CPU time. 

Claim 2: Further, Bianco teaches a present invention uses encryption to protect 
data within a biometric system (col. 50, lines 45-47). 

Claim 4: Further, Bianco (6,256,737 B1 ), in view of Eberhard, further in view of 
Tatebayashi et al (6,049,61 1 ) in claim 1 , fails to teach the step of sending the first 
generated cryptogram to the remote site for comparison with a second cryptogram. 
Eberhard teaches sending the cryptogram to a mobile carrier where it is compared with 
a cryptogram of another random number (col. 3, lines 63-67 and col. 4, lines 1-2). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco by including sending 
a cryptogram to a remote site and comparing it to another cryptogram. This 
modification would have been obvious because a person having ordinary skill in the art 
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would have been motivated to do so, as suggested by Eberhard, in order to allow other 
users at remote sites to receive cryptograms for authentication purposes. 

Claim 5: Further, Bianco (6,256,737 B1), in view of Eberhard. further in view of 
Tatebayashi et al (6,049,61 1) in claim 1 , fails to teach a user over a network wherein 
the second cryptogram is generated from a site other than from the local site. Eberhard 
teaches the generation of a cryptogram at a stationary station, then transmitting that 
cryptogram to a mobile station (col. 3, lines 65-67 and col. 4, lines 1-2). 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco by including the 
generation of a cryptogram at a stationary station, then transmitting that cryptogram to a 
mobile station. This modification would have been obvious because a person having 
ordinary skill in the art would have been motivated to do so, as suggested by Eberhard, 
in order to allow other users at local sites to receive cryptograms for authentication 
purposes. 

Claim 6: Further, Bianco teaches matching a biometric template, and then 
authentication proceeds, (col. 26, lines 34-39) 

Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Bianco in 
view of Eberhard, further in view of Tatebayashi and Veneklase. 
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Claim 3: Further, Bianco (6,256,737 B1 ) in view of Eberhard (5,473,689), further 
in view of Tatebayashi et al (6,049,61 1 ) and Veneklase in claim 1 , fails to teach 
generating a first cryptogram from the random number if the first encrypted biometric 
parameter positively matches the second encrypted biometric parameter. Veneklase, in 
an analogous art, teaches if the password matches an entry of the master password list, 
the analyzing means generates a command (col. 5, lines 32-41) where the password 
may be a biometrically produced password and the command may be a cryptogram. 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco by including the 
generation of a cryptogram upon verification of a biometric parameter match. This 
modification would have been obvious because a person having ordinary skill in the art 
would have been motivated to do so, as suggested by Veneklase, in order to assure 
that only authorized individuals had authority to authenticate a user. 

Claims 7-9 are rejected under 35 U.S.C. 1 03(a) as being unpatentable over 
Bianco in view Veneklase, further in view of that which is commonly known in the art. 

Claim 7: Bianco teaches a computer with an interface to authenticate over a 
network system (col. 12, lines 12-22), biometric identification mechanisms or devices 
utilize a scientific technique to identify a user based on compared measurements of 
unique personal characteristics (col. 7, lines 54-57), live biometric data is matched with 
stored biometric data (col. 8, lines 16-17), and with a successful match, the user ID is 
determined (col. 26, lines 34-37). Bianco teaches that with a successful match, the user 
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ID is determined (col. 26, lines 34-37). Bianco fails to teach generating a second 
random number when the first encrypted biometric parameter does not positively match 
the second encrypted biometric parameter and operating on the second random 
number with a math table to create a first cryptogram when a positive match fails to 
occur between the first and second biometric parameter, Veneklase teaches if the 
password matches an entry of the master password list, the analyzing means generates 
a command (col. 5, lines 32-41) where the password may be a biometrically produced 
password and the command may be a cryptogram. 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco by generating a 
random number and creating a cryptogram upon the obtaining of a negative result. This 
modification would have been obvious because a person having ordinary skill in the art 
would have been motivated to do so, as suggested by Veneklase, in order to assure 
that only authorized individuals had authority to authenticate a user. 

The examiner takes official notice that it is commonly known to one reasonably 
skilled in the art that one can approve an action if a negative result is found, just as 
easily as with a positive result. 

Therefore, it would have been obvious to a person having ordinary skill in tKe art 
at the time the invention was made to modify the system as combined above by 
approving an action if a negative result is found. This modification would have been 
obvious because a person having ordinary skill in the art would have been motivated to 
do so, as suggested by that which is commonly known in the art, in order to allow an 
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action to be implennented as a result of a failure to authenticate to further prevent 
unauthorized access to occur. 

Claim 8: Further, Bianco teaches with a successful match, the user ID is 
determined (col. 26, lines 34-37). Bianco in view Veneklase, further in view of that 
which is commonly known in the art in claim 7, fails to teach approving an action if a 
negative result is found, just as easily as with a positive result. 

The examiner takes official notice that it is commonly known to one reasonably 
skilled in the art that one can approve an action if a negative result is found, just as 
easily as with a positive result. It is commonly known in the art that one can approve an 
action if a negative result is found, just as easily as with a positive result. 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco by approving an 
action if a negative result is found. This modification would have been obvious because 
a person having ordinary skill in the art would have been motivated to do so, as 
suggested by that which Is commonly known in the art, in order to allow an action to be 
implemented as a result of a failure to authenticate to further prevent unauthorized 
access to occur. 

Claim 9: Further, Bianco in view of Veneklase, further in view of that which is 
commonly known in the art in claim 7 fails to teach generating a first cryptogram from 
the random number if the first encrypted biometric parameter positively matches the 
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second encrypted bionnetric parameter, Veneklase, in an analogous art, teacines if the 
password matches an entry of the master password list, the analyzing means generates 
a command (col. 5, lines 32-41). Bianco fails to teach that a password may be a 
biometrically produced password and the command may be a cryptogram. It is 
commonly known to one reasonably skilled in the art that a biometrically produced 
password and the command may be encrypted. 

Therefore, it would have been obvious to a person having ordinary skill in the art 
at the time the invention was made to modify the system by Bianco by including the 
generation of a cryptogram upon verification of a biometric parameter match. This 
modification would have been obvious because a person having ordinary skill in the art 
would have been motivated to do so, as suggested by Veneklase, in order to assure 
that only authorized individuals had authority to authenticate a user. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Todd M Jack whose telephone number is 571-272-3823. 
The examiner can normally be reached on M-Fridays. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert Decady can be reached on 571-272-3819. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306, 
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Information regarding tlie status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 
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